US bans Kaspersky software for alleged Russian links

1,784 Views | 12 Replies | Last: 1 yr ago by Rex Racer
dabo man
How long do you want to ignore this user?
AG
US bans Kaspersky software for alleged Russian links
https://www.bbc.com/news/articles/ceqq7663wd2o
Quote:

The plan will effectively bar downloads of software updates, resales and licensing of the product from 29 September and new business will be restricted within 30 days of the announcement.
...

The Commerce Department will also list two Russian and one UK-based unit of Kaspersky for allegedly cooperating with Russian military intelligence.

The company has long been a target for US regulators. In 2017, the Department of Homeland Security banned its flagship antivirus product from federal networks, alleging ties to Russian intelligence.

While the multinational firm is headquartered in Moscow, it has offices in 31 countries around the world, servicing more than 400 million users and 270,000 corporate clients in more than 200 countries, the Commerce Department said.

dabo man
How long do you want to ignore this user?
AG
I've been a Kaspersky customer for 14 years. I'm a Linux user but have a Windows 11 VirtualBox VM, and my son runs Windows 10 and is heavily into gaming. I'm not a big believer in Windows Defender and have 621 days left in my Kaspersky subscription. I'm going to use VPN to continue to get updates.

I will be interested to see their evidence of cooperation with Russian military intelligence.
IrishAg
How long do you want to ignore this user?
dabo man said:

I've been a Kaspersky customer for 14 years. I'm a Linux user but have a Windows 11 VirtualBox VM, and my son runs Windows 10 and is heavily into gaming. I'm not a big believer in Windows Defender and have 621 days left in my Kaspersky subscription. I'm going to use VPN to continue to get updates.

I will be interested to see their evidence of cooperation with Russian military intelligence.

I don't think we'll ever have direct evidence, becuase I don't think Kaspersky's software is directly spying. BUT...I do believe they route all of their traffic through Russian CDNs that Russian Intelligence groups have direct access to. So, while they might not be directly collecting data, they are passively allowing the data to be collected due to Russian laws. Russia has pretty much copied China's method of managing internet traffic where it is illegal for you to move across their networks without the the government being allowed to intercept/inspect all of your data.
Pro Sandy
How long do you want to ignore this user?
AG
There has been things in the open source for years. US agencies have been banned from using their products since 2017 because of their actions, not just risk.

https://www.cnet.com/news/privacy/kaspersky-lab-russian-hacking-us-government-national-security-faq/
akaggie05
How long do you want to ignore this user?
AG
Yeah, wtf? In 2024 times nobody sees a problem with relying on SW from a Russia-based company to protect their interests? Even if the Kaspersky employees themselves are straight arrows, who knows what kind of surveillance the Russian govt has them and the collected data from their SW under. Hard pass.
Cloud
How long do you want to ignore this user?
People still pay for AV in 2024? Windows defender is fine
dabo man
How long do you want to ignore this user?
AG
I don't think very much of Windows Defender.
YouBet
How long do you want to ignore this user?
AG
akaggie05 said:

Yeah, wtf? In 2024 times nobody sees a problem with relying on SW from a Russia-based company to protect their interests? Even if the Kaspersky employees themselves are straight arrows, who knows what kind of surveillance the Russian govt has them and the collected data from their SW under. Hard pass.


This. Using Russian AV software? That's a bold strategy, Cotton.

I'll put this on the list of other things I'll never use like TikTok, Chinese phones, and Chinese EVs.
SlackerAg
How long do you want to ignore this user?
AG
What about web servers that use NGINX?
dabo man
How long do you want to ignore this user?
AG
My primary workstation runs XUbuntu Linux 22.04. It's what I'm using about 95% of the time. No AV software involved.

I have a Windows 11 Oracle VirtualBox VM that I use mainly for playing Microsoft Flight Simulator and printing. Windows handles fonts with printing much better than Linux. I probably don't need paid AV on this machine. Windows Defender would be fine.

My 15 year old is a heavy gamer, and his machine runs Windows 10. He is always modding games and needs good AV protection. Kaspersky is really for him. It is stellar software. I'll probably wind up buying Bitdefender rather than using VPN to update my databases, but I'm not happy about being out the money, and I'm still waiting to see the evidence against the company.

It's not that I'm naive enough to believe that a Russian company wouldn't be collecting data on behalf of Putin. It's more than I'm cynical enough that I believe nothing that comes from a spokesperson in DC without evidence, and I've not been presented with any.
YouBet
How long do you want to ignore this user?
AG
dabo man said:

My primary workstation runs XUbuntu Linux 22.04. It's what I'm using about 95% of the time. No AV software involved.

I have a Windows 11 Oracle VirtualBox VM that I use mainly for playing Microsoft Flight Simulator and printing. Windows handles fonts with printing much better than Linux. I probably don't need paid AV on this machine. Windows Defender would be fine.

My 15 year old is a heavy gamer, and his machine runs Windows 10. He is always modding games and needs good AV protection. Kaspersky is really for him. It is stellar software. I'll probably wind up buying Bitdefender rather than using VPN to update my databases, but I'm not happy about being out the money, and I'm still waiting to see the evidence against the company.

It's not that I'm naive enough to believe that a Russian company wouldn't be collecting data on behalf of Putin. It's more than I'm cynical enough that I believe nothing that comes from a spokesperson in DC without evidence, and I've not been presented with any.


Definitely warranted. I guess I would like at it from POV that if Russia isn't skimming your data then the US is going to have you on a list for using them. This deal probably cuts both ways.
IrishAg
How long do you want to ignore this user?
dabo man said:

My primary workstation runs XUbuntu Linux 22.04. It's what I'm using about 95% of the time. No AV software involved.

I have a Windows 11 Oracle VirtualBox VM that I use mainly for playing Microsoft Flight Simulator and printing. Windows handles fonts with printing much better than Linux. I probably don't need paid AV on this machine. Windows Defender would be fine.

My 15 year old is a heavy gamer, and his machine runs Windows 10. He is always modding games and needs good AV protection. Kaspersky is really for him. It is stellar software. I'll probably wind up buying Bitdefender rather than using VPN to update my databases, but I'm not happy about being out the money, and I'm still waiting to see the evidence against the company.

It's not that I'm naive enough to believe that a Russian company wouldn't be collecting data on behalf of Putin. It's more than I'm cynical enough that I believe nothing that comes from a spokesperson in DC without evidence, and I've not been presented with any.
I can tell you from first hand knowledge that Russian CDNs, which Kaspersky only goes through when connecting back to home, are tied into Russian Intelligence services. And if you don't understand how CDNs work in general, they are decrypting all of the traffic to analyze things for acceleration and security, so nothing would be hidden if the CDN isn't trustworthy.

Overall it's a poor man's attempt at what China has done, so if you're a company and have a global network you have to segment China and Russia from the rest of your network. Also, from what I understand (and this is second hand knowledge) Russia has reportedly adopted China security controls on data centers. Which, back to first hand knowledge, means any government official has full access to any server in any data center at any time. It's illegal to have on disk encryption in a data center, that they don't have access to. Now, I don't know if Russia's control is at the level of China's, but I'm going to guess it's not far away. So do I believe Kaspersky is spying on you, not at all. At the same time, Russia's intelligence agency has full access to all data from Kaspersky without having to even get someone from Kaspersky involved or let them know.

So with all of that said, unless you're a big fish, or you have something on that computer that would flag an intelligence search, then it doesn't matter one bit. But, if you don't believe that DC and companies in the US have real reasons to block access to Kaspersky from critical systems, then I would strongly say you are incorrect.
Rex Racer
How long do you want to ignore this user?
AG
I have always been suspicious of Kaspersky, whether warranted or not. I have never even considered using it.
Refresh
Page 1 of 1
 
×
subscribe Verify your student status
See Subscription Benefits
Trial only available to users who have never subscribed or participated in a previous trial.